@codacy/tools-checkov-3 0.15.0 → 0.17.0

package/dist/index.js

@@ -12451,10 +12451,10 @@ async function listDirSafe(dir) {
 async function pathExists(p) {
   return import_promises.default.access(p).then(() => true).catch(() => false);
 }
-function buildEnv(ctx) {
-  if (ctx.runner !== "container") return void 0;
+function buildEnv() {
   const env = {
-    RENDER_EDGES_DUPLICATE_ITER_COUNT: "50"
+    RENDER_EDGES_DUPLICATE_ITER_COUNT: "50",
+    CKV_SKIP_PACKAGE_UPDATE_CHECK: "true"
   };
   if (process.env.http_proxy) {
     env.http_proxy = process.env.http_proxy;
@@ -12687,19 +12687,28 @@ var adapter = {
     }
     const absoluteFiles = ctx.targetFiles.map((f) => import_path.default.resolve(ctx.repositoryRoot, f));
     const fileChunks = (0, import_tooling.chunkFilesForArgv)(absoluteFiles);
-    const env = buildEnv(ctx);
+    const env = buildEnv();
     const frameworks = [];
+    let scannedCount = 0;
     try {
       for (const chunk of fileChunks) {
+        if (ctx.signal?.aborted) break;
         const fileArgs = [];
         for (const file of chunk) {
           fileArgs.push("-f", file);
         }
-        const { stdout, stderr, exitCode } = await (0, import_tooling.spawnTool)(command, [...baseArgs, ...fileArgs], {
+        const spawned = await (0, import_tooling.spawnTool)(command, [...baseArgs, ...fileArgs], {
           cwd: ctx.repositoryRoot,
           env,
-          logger: ctx.logger
+          logger: ctx.logger,
+          signal: ctx.signal
+        }).catch((err) => {
+          if (ctx.signal?.aborted) return null;
+          throw err;
         });
+        if (spawned === null) break;
+        const { stdout, stderr, exitCode } = spawned;
+        scannedCount += chunk.length;
         if (exitCode > 1) {
           errors.push({
             toolId: TOOL_ID,
@@ -12753,6 +12762,20 @@ var adapter = {
           frameworks.push(parsed);
         }
       }
+      if (ctx.signal?.aborted) {
+        errors.push({
+          toolId: TOOL_ID,
+          phase: "toolInvoke",
+          kind: "Timeout",
+          message: `checkov timed out; returning partial results for ${scannedCount}/${ctx.targetFiles.length} files`,
+          level: "error"
+        });
+        ctx.logger.warn("checkov timed out; returning partial results", {
+          toolId: TOOL_ID,
+          scannedFiles: scannedCount,
+          totalFiles: ctx.targetFiles.length
+        });
+      }
       const enabledPatterns = new Set(codacyConfig.patterns.map((p) => p.patternId));
       const targetFilesSet = new Set(ctx.targetFiles);
       const linesCache = /* @__PURE__ */ new Map();

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@codacy/tools-checkov-3",
-  "version": "0.15.0",
+  "version": "0.17.0",
   "description": "Checkov adapter — CLI-mode IaC security scanner",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
@@ -8,7 +8,7 @@
     "dist"
   ],
   "dependencies": {
-    "@codacy/tooling": "0.15.0"
+    "@codacy/tooling": "0.17.0"
   },
   "license": "MIT",
   "author": "Codacy <support@codacy.com> (https://www.codacy.com)",